Officer, IT Audit
Head Office · Nairobi 

About the job
QuickMart is one of Kenya’s fastest-growing retailers with 70 stores, 8,000+ employees and a network of suppliers across 16 counties. We are strengthening our Internal Audit capabilities, and we are looking for an Officer, IT Audit. Reporting to the Head of Internal Audit, the role holder will be responsible for conducting IT audits across Quick Mart's technology environment in line with the approved audit plan. The role exists to safeguard business operations, financial integrity, and customer information.

Job Responsibilities

• Evaluate IT related controls, governance and risk management elements across the assigned audits, and
  design appropriate recommendations for implementation.
• Plan and execute IT audits in accordance with the Global Internal Audit Standards and leading IT audit
  frameworks and methodologies.
• Develop detailed IT audit engagement plans in consultation with the Head of Internal Audit.
• Determine the specific audit scope for assigned projects and adopt agility by adjusting fieldwork parameters
  where necessary.
• Conduct detailed audit tests to highlight control weaknesses and recommend improvements.
• Conduct the full audit cycle to evaluate the design and effectiveness of IT controls.
• Verify compliance with data protection and relevant IT-related regulations, standards, and policies.
• Collect and document sufficient audit evidence to support all findings and recommendations.
• Prepare comprehensive IT audit reports documenting findings, risk ratings, and corrective action plans in
  conformance with Audit Standards.
• Conduct follow-up audits to validate implementation of previous audit recommendations.
• Support IT-related fraud and irregularity investigations as required.
• Maintain transparent and open communication with audit clients and with internal audit leadership.
• Maintain awareness and advice Management on emerging technology risks and evolving cybersecurity
  threats relevant to Quick Mart.
• Undertake quality assurance and improvement checks on other audit units within the department.
• Deliver on performance requirements as defined in the internal audit department's strategy, balanced
  scorecard, and personal targets.

Basic qualifications

• Bachelor’s degree in information technology, computer science, or a related field.
• Certified Information Systems Auditor (CISA) certification is required.
• CISSP, CISM, or CEH certifications are an added advantage.
• At least 3 years' experience in IT audit, information security, or IT risk management, preferably in retail,
  financial services, or technology sectors.
• Working knowledge of applicable data protection regulations (e.g., the Kenya Data Protection Act) is
  required.

Preferred qualifications

• Strong knowledge of IT audit methodologies, IT governance frameworks (e.g., COBIT), and the Global Internal Audit Standards.
• Sound understanding of cybersecurity frameworks and practices (e.g., NIST, ISO 27001).
• Working knowledge of ERP, POS, database, and network security concepts.
• Proficiency in IT audit and data analytics tools.

Behavioral

• High degree of integrity, confidentiality, objectivity, and professional skepticism.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills, including the ability to translate technical IT risks into business language for non-technical stakeholders.
• Strong stakeholder management and interpersonal skills.
• Ability to work independently and manage multiple audit assignments concurrently.
• High attention to detail.

How to apply
Please submit your CV and cover letter to This email address is being protected from spambots. You need JavaScript enabled to view it. by Thursday 6th August 2026.